Route Origin Authorization

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/hXeVQye863qZ4A3X6oRW1fEQtus.roa
File:                     hXeVQye863qZ4A3X6oRW1fEQtus.roa (raw, json)
Hash identifier:          RkIYD6xU8tBNX+Lm01pHw+d4sPdbWFKcPGlvkA5s65A=
Subject key identifier:   85:77:95:43:27:BC:EB:7A:99:E0:0D:D7:EA:84:56:D5:F1:10:B6:EB
Certificate issuer:       /CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39
Certificate serial:       021B9DB3
Authority key identifier: 2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/hXeVQye863qZ4A3X6oRW1fEQtus.roa
Signing time:             Sat 01 Jan 2022 15:56:13 +0000
ROA not before:           Sat 01 Jan 2022 15:56:13 +0000
ROA not after:            Sat 01 Jul 2023 00:00:00 +0000
asID:                     204046
IP address blocks:        185.116.104.0/22 maxlen: 24
                          2a06:7d80::/29 maxlen: 48

Validation:               Failed, certificate has expired

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 35364275 (0x21b9db3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2cfaa22bd65cac82858ea091686d5b3b4be3bd39
        Validity
            Not Before: Jan  1 15:56:13 2022 GMT
            Not After : Jul  1 00:00:00 2023 GMT
        Subject: CN=8577954327bceb7a99e00dd7ea8456d5f110b6eb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:83:71:aa:21:f7:22:27:0e:b8:33:92:4c:d2:
                    d4:8f:2d:ef:87:ba:8f:ef:ed:9c:0d:b2:5e:af:d1:
                    d0:45:07:b9:d7:bc:83:d8:ee:07:7a:99:f8:27:96:
                    b3:e5:51:5f:84:95:5d:11:87:f5:64:a6:cc:c2:ee:
                    46:bf:32:19:dd:ad:16:5d:f5:3d:33:9d:7d:25:ec:
                    95:a9:5b:56:99:19:17:a4:d1:15:a3:a3:66:e3:c5:
                    ec:6b:20:ac:db:86:c9:0b:d6:6d:3f:7c:20:56:e9:
                    39:8b:e7:c5:87:be:c3:87:7f:b9:9a:07:65:05:d7:
                    75:94:65:ac:07:e5:14:a8:8b:ad:0b:43:76:4d:4a:
                    76:e7:46:f0:4c:11:f3:fd:ce:76:6d:a1:80:2a:94:
                    e4:64:13:53:86:7e:71:c1:ee:48:ea:2d:08:72:49:
                    00:55:a7:05:02:8c:0b:26:e7:4d:75:e9:17:57:52:
                    d5:0d:e6:22:3a:99:3d:ba:66:65:7d:38:b8:ae:54:
                    ca:39:12:ab:96:d6:38:83:99:2c:ab:d0:6f:0f:c3:
                    a5:91:9a:f3:c4:7e:ea:7e:aa:47:b9:e9:84:db:54:
                    9e:59:1c:c0:b5:a4:ed:4f:a8:ea:f0:be:45:ef:83:
                    fa:08:06:03:8d:d3:33:de:d9:a2:e9:26:a9:98:f5:
                    d4:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:77:95:43:27:BC:EB:7A:99:E0:0D:D7:EA:84:56:D5:F1:10:B6:EB
            X509v3 Authority Key Identifier:
                keyid:2C:FA:A2:2B:D6:5C:AC:82:85:8E:A0:91:68:6D:5B:3B:4B:E3:BD:39

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/hXeVQye863qZ4A3X6oRW1fEQtus.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/51/5be44c-a4f2-4bd0-b5a7-b468838c7fdf/1/LPqiK9ZcrIKFjqCRaG1bO0vjvTk.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  185.116.104.0/22
                IPv6:
                  2a06:7d80::/29

    Signature Algorithm: sha256WithRSAEncryption
         a7:0c:bb:be:1f:e3:bf:b9:46:31:40:11:77:8e:d2:b8:02:5a:
         69:cf:7e:9d:42:24:7f:39:7e:0b:8a:df:ac:1f:dc:74:a9:a3:
         a3:b0:bb:63:cd:31:3b:73:25:22:cc:a7:64:dd:58:8c:a3:79:
         80:de:5b:6b:fb:82:64:9a:29:fa:5b:89:08:75:c5:a7:94:25:
         11:66:f5:52:02:42:eb:e5:0e:cd:5d:f8:1c:b0:c0:d1:6d:f1:
         45:f4:5a:9a:bb:15:01:1f:75:ee:21:ef:9b:34:ae:af:21:a4:
         8a:46:6a:13:19:ba:f9:b5:ea:d7:ef:32:0a:38:db:59:d8:67:
         81:e8:43:7e:64:b4:70:f5:8f:81:d1:db:39:99:79:94:e6:a8:
         cc:63:0f:b7:a9:cb:88:f7:e4:cd:a4:23:fa:24:57:23:7b:57:
         3c:8e:a7:ed:85:c0:48:9f:0c:03:55:5a:7d:ac:66:fc:6a:ff:
         51:35:23:1a:ec:ac:6c:bd:b9:8a:be:76:51:92:0e:14:21:14:
         35:c7:90:a6:8b:91:62:f2:cd:d0:16:70:12:66:5c:e4:c4:d2:
         11:49:94:e7:9f:86:21:4d:a5:bd:47:14:4a:07:7f:18:c0:5c:
         b9:4b:4c:67:89:6f:b6:22:3d:21:ce:92:8c:4f:a2:1f:21:e3:
         48:21:1a:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----